Juniper Juniper Certifications JN0-635 Questions & Answers

• Question 51:

  Click the Exhibit button.

  

  Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?

  A. 74

  B. 34

  C. 40

  D. 17

  Correct Answer: C

• Question 52:

  Click the Exhibit button.

  

  Referring to the exhibit, which three types of traffic would be examined by the IPS policy between Switch-1 and Switch-2? (Choose three.)

  A. TCP

  B. LLDP

  C. ARP

  D. ICMP

  E. UDP

  Correct Answer: ADE

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-idp-policy-rulesand-rulebases.html

• Question 53:

  Click the Exhibit button.

  

  A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.

  Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 54:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. You can secure intra-VLAN traffic with a security policy on this device

  B. You can secure inter-VLAN traffic with a security policy on this device

  C. The device can pass Layer 2 and Layer 3 traffic at the same time

  D. The device cannot pass Layer 2 and Layer 3 traffic at the same time

  Correct Answer: AD

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ethernet-port-switchingmodes.html

• Question 55:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. Source NAT with PAT is occurring

  B. Destination NAT is occurring

  C. Static NAT without PAT is occurring

  D. Source NAT without PAT is occurring

  Correct Answer: A

• Question 56:

  Click the Exhibit button.

  

  Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:

  A site-to-site IPsec VPN must be used to secure traffic between the two sites; The IKE identity on the new site gateway device must use the hostname option; and Internet traffic from each site should exit through

  its local Internet connection.

  The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not

  working.

  In this scenario, what configuration change is needed for the tunnel to come up?

  A. Remove the quotes around the hostname

  B. Bind interface st0 to the gateway

  C. Change the IKE policy mode to aggressive

  D. Apply a static address to ge-0/0/2

  Correct Answer: C

• Question 57:

  Click the Exhibit button.

  

  You have configured tenant systems on your SRX Series device.

  Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)

  A. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch

  B. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch

  C. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch

  D. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch

  Correct Answer: AC

• Question 58:

  Click the Exhibit button.

  

  You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.

  Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

  A. [edit security flow] user@srx# set tcp-mss ipsec-vpn mss 65535

  B. [edit security flow] user@srx# set ipsec-performance-acceleration

  C. [edit security flow] user@srx# set power-mode-ipsec

  D. [edit security flow] user@srx# set load-distribution session-affinity ipsec

  Correct Answer: BD

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-improving-ipsecvpn-traffic-performance.html

• Question 59:

  When would you use the port-overloading-factor 1 setting?

  A. to enable the port-overloading

  B. to disable the port-overloading

  C. to map ports with 1:1 ratio for port-overloading

  D. to set the maximum port-overloading capacity to 65,536

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/ security-edit-port-overloading-interface-source-nat.html

• Question 60:

  Which Junos security feature is used for signature-based attack prevention?

  A. RADIUS

  B. AppQoS

  C. IPS

  D. PIM

  Correct Answer: C